Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/z6hQB9rc6gC8TxscZzTGjfVo0Fg.roa
File: z6hQB9rc6gC8TxscZzTGjfVo0Fg.roa (raw, json)
Hash identifier: R7K7JddiOUViHePetVy1WPf7LaXLSrH/qpRjbFUYoWI=
Subject key identifier: CF:A8:50:07:DA:DC:EA:00:BC:4F:1B:1C:67:34:C6:8D:F5:68:D0:58
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0194FAB3EB0911661E67EC1A53126E40F2EA
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/z6hQB9rc6gC8TxscZzTGjfVo0Fg.roa
Signing time: Wed 12 Feb 2025 15:08:02 +0000
ROA not before: Wed 12 Feb 2025 15:08:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 178.22.26.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 28 Feb 2025 01:10:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fa:b3:eb:09:11:66:1e:67:ec:1a:53:12:6e:40:f2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Feb 12 15:08:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cfa85007dadcea00bc4f1b1c6734c68df568d058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:77:4a:b5:6e:f5:29:66:62:ea:62:31:e9:bd:
f1:d2:68:2c:ef:49:5c:4f:47:57:04:e9:1e:d0:c4:
1a:93:92:30:b8:da:2b:27:9c:be:90:d2:52:b1:d1:
b4:fb:7a:45:40:62:85:8b:72:96:50:80:fb:0d:d4:
42:71:20:cb:80:04:4d:9d:ab:a0:d3:5b:78:c7:15:
75:03:47:3b:92:41:e4:d2:48:61:8b:94:c1:62:33:
fd:da:ef:a4:09:04:20:db:5e:49:eb:9b:c1:23:57:
81:db:04:f9:56:57:7d:0e:1e:7a:e4:83:a0:10:ed:
3c:f0:d6:d2:ae:16:c5:9a:de:d6:7f:31:7b:01:2a:
6f:88:91:64:59:e2:b5:6d:5b:57:9c:b7:17:13:14:
02:31:b4:9f:e6:3b:fd:c0:49:17:b6:93:c2:c1:52:
29:ec:26:cc:51:21:58:78:f7:f1:af:29:12:4d:5a:
2c:ed:c2:75:40:96:ec:64:44:79:8f:83:bf:08:03:
74:f1:a0:76:40:b6:6c:d5:ba:82:e8:06:89:da:06:
eb:7f:60:09:00:c5:8e:4b:97:ce:9e:91:6d:95:79:
a1:d9:bb:f1:90:ad:f7:7a:05:8a:89:22:04:3b:f5:
83:02:c6:dd:b2:95:18:65:6a:9b:51:80:79:0d:08:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A8:50:07:DA:DC:EA:00:BC:4F:1B:1C:67:34:C6:8D:F5:68:D0:58
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/z6hQB9rc6gC8TxscZzTGjfVo0Fg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.22.26.0/24
Signature Algorithm: sha256WithRSAEncryption
40:4e:63:da:01:54:46:28:6d:35:5c:55:a4:08:12:1e:b9:c9:
30:70:ee:0b:5c:5f:c9:22:02:fa:ad:ea:c7:fb:c2:b4:7e:21:
97:a7:e9:e8:33:71:2b:b8:c3:9a:7b:91:70:a4:8a:f6:b1:c5:
49:9f:79:c9:36:5b:e4:1c:ac:b6:c0:be:3e:18:a3:dd:08:cf:
69:fb:7b:c4:03:37:77:75:b9:c6:04:fb:eb:d0:b1:6d:da:13:
0a:8c:8d:b4:cc:60:73:fb:29:49:47:df:07:f1:60:06:b3:ab:
c3:10:64:3e:8e:f8:5f:c1:f7:5d:90:8b:32:eb:21:98:bb:31:
32:44:b7:d3:23:d9:f1:d1:c0:53:da:2b:96:27:d2:60:99:a2:
21:f4:6c:cb:9f:7d:b3:4f:35:2f:a0:cf:15:1c:f6:3b:a8:11:
41:69:b1:3f:82:ac:18:f3:53:ca:81:a1:f1:cd:a8:f2:88:7a:
6b:63:d5:3e:c9:e2:23:ae:14:61:bf:d3:2d:b3:e5:34:f3:c5:
02:45:27:16:5f:80:6d:54:a1:60:9f:c6:ae:80:cb:01:3b:18:
da:ce:14:97:a0:f4:b5:1d:86:e0:1a:1b:cc:6b:ab:53:cc:e3:
59:2a:c3:5f:08:b9:54:db:fa:cb:0f:64:b1:e6:36:8b:07:f3:
d1:38:74:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:47:24 2025 by rpki-client